u/HeyHelpDeskGuy

I work with a lot of subcontractors. Lately I've noticed the following with them:

1. No idea CMMC is a thing - which leads me having to go into my speech and presentation about it.

2. Struggling to achieve CMMC status - they've hired a consultant or MSP who never achieved CMMC status so it's the blind leading the blind.

It's gotten so bad that I have one internal employee here giving out my personal cell number to subs and telling them to call me immediately and I'll "get them situated", which is especially aggravating.

We've been requested to institute a new desk booking software that has to allow split tunneling to work. Obviously we can't do this for our cui enclave.

Anyone have any guidance on this issue?

Has anyone encountered an overzealous Gov official who declares everything as CUI? He's new to the CUI process, and has declared that just about everything including Site specific info /number is CUI. I had a meeting with him today and tried to calm him down about how CUI is supposed to be marked and categorized.